Prisma Cloud Remediation - AWS EC2 Security Group Misconfiguration

This playbook remediates the Prisma Cloud AWS EC2 alerts generated by the following policies: - AWS Default Security Group Does Not Restrict All Traffic - AWS Security Group allows all traffic on SSH port (22).

Pack

PrismaCloud

Tasks

13

Inputs

• policyId — Provides the Prisma Cloud policy Id.

Commands used

• aws-ec2-describe-security-groups
• aws-ec2-revoke-security-group-ingress-rule